nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Announcement: ICX FastIron 08.0.30t is now available on Support

michael_brado

Our ICX FastIron developers and QAhave a new maintenance release with bug fixes.

This firmware runs on FCX, FSX, ICX – 6610, 6430/6450, 6650, 7250, 7450, 7750 models.

FastIron 08.0.30t Release Notes:

https://support.ruckuswireless.com/documents/2657-fastiron-08-0-30t-release-notes

Ruckus ICX FastIron 08.0.30t Software Release (.zip):

https://support.ruckuswireless.com/software/1994-ruckus-icx-fastiron-08-0-30t-software-release-zip

MD5: 480cea85722d2c138c4df7cbb8d4b175

Thanks and best regards,

Find more posts tagged with

Accepted answers

All comments

unknown

Thank you. According to the release notes, this release "contains defect fixes. There are no enhancements in this release."

Is there going to be a future release adding the capability of an ICX6450-C12P to have a diffie-hellman-group14-sha1 SSH key exchange? The current key exchange capability of an ICX6450-C12-PD is not supported by modern SSH clients, as it has known security flaws. I am currently running version 80.0.30saT311

Thank you!

michael_brado

I forwarded your question to the FastIron development team...

jijo_panangat

Hello Eric,

You are correct! diffie-hellman-group14-sha1 isnt supported on 8030t. This is supported on 8070 and higher releases but limited to ICX 7000 series platforms. Adding this capability on 8030 branch is very unlikely will get you a confirmation shortly.

Here is excerpt from 8030t release notes- “Brocade Fast Iron Release
08.0.30f introduces new enhancements”

•Key exchange method
-By default, diffie-hellman-group1-sha1 is the key-exchange method used to
establish an SSH connection. You can change the default key-exchange method and
configure diffie-hellman-group14-sha1 as the key-exchange method using the ip ssh key-exchange-method dh-group14-sha1 command.
The diffie-hellman-group14-sha1 method provides enhanced encryption of shared
secrets between two devices. This
is supported only on FCX devices

jijo_panangat

Hello Eric,

You
are correct! diffie-hellman-group14-sha1 isnt supported on 8030t. This
is supported on 8070 and higher releases but limited to ICX 7000 series
platforms. Adding this capability on 8030 branch is very unlikely will
get you a confirmation shortly.

Here is excerpt from 8030t release notes- “Brocade Fast Iron Release
08.0.30f introduces new enhancements”

Could you let us know who is end customer here.

sarma_kuppa

Eric, as Jijo said it is highly unlikely to get the feature into 8030 patches unless there is a strong business case.

unknown

That said, you can use RSA 2048 bit for ssh authentication algorithm.

Separate topic.... you can and disable AES-CBC encryption, which meets the standard of the Joint Interoperability Test Command (JITC). JITC is a United States military organization that tests technology pertaining to multiple branches of the armed services and the government.

ip ssh encryption disable-aes-cbc

I am a bit surprised no option is available for a larger RSA modulus, either. Many devices support 4096 bit RSA modulus.

Either way, RSA is slow to generate but faster than DSA to authenticate once configured.